$ rpki-client -vvvf rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft File: tjIT2OZi9FS-rux_PELjr2-JX7I.mft (raw, json) Hash identifier: +maHZuHgYCtbv8iGZIWZVzijk+Xfpl1nWIDEqOe6qM0= Subject key identifier: C1:68:EC:95:6E:A8:F5:D3:50:85:A8:73:55:13:B9:E4:B7:EB:05:B9 Authority key identifier: B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 Certificate issuer: /CN=A9135020/serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Certificate serial: 04C6 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft Manifest number: 04AC Signing time: Thu 24 Sep 2026 23:45:23 +0000 Manifest this update: Thu 24 Sep 2026 23:45:22 +0000 Manifest next update: Thu 01 Oct 2026 23:45:22 +0000 Files and hashes: 1: tjIT2OZi9FS-rux_PELjr2-JX7I.crl (hash: K3Mxs87yohJEPIEQgGKbHgGKEfHdwpxSlhSNQuJpm/k=) 2: 4A7E1926947511EC9795DF56C4F9AE02.roa (hash: YLvOpo/gAJOyi4aEbUEuHHlI1c0Z1SZvTOBlRFCy2+E=) 3: E6B9A5DA95F611EC88E42C7EC4F9AE02.roa (hash: 06opqbAigPxpeoeKrY3XTLUmvBCL1e7zcB701WZYE7c=) 4: E61E258895F611EC88E42C7EC4F9AE02.roa (hash: 9Fd943GuQnIJTghRawSBwpY1MlmUVR4OO3uXynSyRN8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 Oct 2026 23:45:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1222 (0x4c6) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9135020, serialNumber=B63213D8E662F454BEAEEC7F3C42E3AF6F895FB2 Validity Not Before: Sep 24 23:45:22 2026 GMT Not After : Oct 1 23:45:22 2026 GMT Subject: CN=6ab5b613-77ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ba:a3:54:01:00:b3:35:9c:ee:07:3e:f4:fd: ec:a6:a5:5a:51:f4:14:e6:54:6a:13:a9:89:67:ab: 47:7a:83:5e:0c:8a:7a:ca:75:59:44:d1:1b:73:9e: 8d:e7:3f:13:d7:12:49:23:f1:b6:3d:e9:5f:ef:6a: 63:c5:be:5a:4c:33:94:f1:4b:5b:56:4a:2b:8e:ff: d3:83:00:f4:b0:d9:ec:c8:97:2a:46:07:bc:a9:63: 43:30:e1:ee:e8:f7:df:09:01:1a:3e:69:51:7a:8d: ca:3d:2a:d7:1c:12:ec:85:be:f6:b3:be:7e:b2:6f: bd:a5:b9:1d:2f:46:10:b3:88:1a:b6:2e:c6:55:6e: ea:23:9d:eb:a1:de:6a:59:c3:05:ea:b6:b4:57:3b: 0b:46:71:f6:a1:28:32:6a:7e:f1:a2:3c:99:f8:ad: 44:ff:80:49:ba:f1:6d:cf:2c:d3:df:07:1e:c3:db: 47:31:7d:1d:05:24:dc:e1:37:d0:3d:44:0a:d3:66: 56:2b:69:66:b9:28:fc:73:50:5e:19:a3:9a:d4:92: 6a:77:79:f3:d7:90:66:07:90:b8:b9:33:eb:ea:1e: c8:ac:05:ad:28:4c:7e:2c:c4:85:5a:c1:45:83:82: 19:7a:a2:e4:36:31:5a:9c:18:01:2f:57:65:94:9c: 23:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:68:EC:95:6E:A8:F5:D3:50:85:A8:73:55:13:B9:E4:B7:EB:05:B9 X509v3 Authority Key Identifier: keyid:B6:32:13:D8:E6:62:F4:54:BE:AE:EC:7F:3C:42:E3:AF:6F:89:5F:B2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tjIT2OZi9FS-rux_PELjr2-JX7I.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135020/BE1EE504947011EC91B46C4DC4F9AE02/tjIT2OZi9FS-rux_PELjr2-JX7I.mft sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 2f:bd:77:01:78:56:c7:c1:df:0b:20:94:ad:12:0d:42:1d:42: f8:0e:b7:1b:fb:48:5e:b0:fb:16:12:e5:fa:e4:28:91:0b:c1: 6c:68:42:11:db:9d:d9:de:11:66:a3:fc:b3:c2:b0:81:94:45: e5:25:18:43:55:d4:fb:dc:5e:ab:87:06:a8:2e:03:ea:2d:ac: 20:84:1a:43:88:7c:6b:7f:7f:e9:62:c8:7d:48:e9:07:97:e5: 98:79:25:78:f9:78:64:1c:07:02:b5:e8:55:39:29:ba:61:ae: 4b:97:86:e2:6a:36:3b:30:2a:53:e4:80:d6:89:3d:f9:de:f8: 0c:a5:3b:e4:01:79:42:99:8d:b7:e2:24:01:ce:98:38:0c:5d: ad:88:39:3b:d3:60:aa:3e:cf:b4:6b:c7:d8:9e:b8:60:06:bd: 45:15:6e:5f:e9:8a:b9:83:dc:39:93:f7:81:4a:0f:45:2a:68: 92:25:05:33:a9:15:40:8d:69:c3:c8:71:b3:e7:0e:3c:fb:6c: ac:e7:b9:0e:34:71:e3:f9:1f:ee:20:ef:70:73:1d:99:e2:80: 2f:c1:54:27:3c:e4:38:a3:02:d8:6f:9e:60:35:78:dc:39:e6: 16:53:fe:2e:e5:e3:9c:1d:7c:1b:7d:d5:67:86:c3:2c:50:52: 8f:f4:61:58 -----BEGIN CERTIFICATE----- MIIFTzCCBDegAwIBAgICBMYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx MzUwMjAxMTAvBgNVBAUTKEI2MzIxM0Q4RTY2MkY0NTRCRUFFRUM3RjNDNDJFM0FG NkY4OTVGQjIwHhcNMjYwOTI0MjM0NTIyWhcNMjYxMDAxMjM0NTIyWjAYMRYwFAYD VQQDEw02YWI1YjYxMy03N2NlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEApbqjVAEAszWc7gc+9P3spqVaUfQU5lRqE6mJZ6tHeoNeDIp6ynVZRNEbc56N 5z8T1xJJI/G2Pelf72pjxb5aTDOU8UtbVkorjv/TgwD0sNnsyJcqRge8qWNDMOHu 6PffCQEaPmlReo3KPSrXHBLshb72s75+sm+9pbkdL0YQs4gati7GVW7qI53rod5q WcMF6ra0VzsLRnH2oSgyan7xojyZ+K1E/4BJuvFtzyzT3wcew9tHMX0dBSTc4TfQ PUQK02ZWK2lmuSj8c1BeGaOa1JJqd3nz15BmB5C4uTPr6h7IrAWtKEx+LMSFWsFF g4IZeqLkNjFanBgBL1dllJwjtQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFMFo7JVu qPXTUIWoc1UTueS36wW5MB8GA1UdIwQYMBaAFLYyE9jmYvRUvq7sfzxC469viV+y MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNTAyMC9CRTFFRTUwNDk0 NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlGUy1ydXhfUEVManIyLUpY N0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3RqSVQyT1ppOUZTLXJ1eF9QRUxqcjItSlg3SS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz NTAyMC9CRTFFRTUwNDk0NzAxMUVDOTFCNDZDNERDNEY5QUUwMi90aklUMk9aaTlG Uy1ydXhfUEVManIyLUpYN0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC AQEAL713AXhWx8HfCyCUrRINQh1C+A63G/tIXrD7FhLl+uQokQvBbGhCEdud2d4R ZqP8s8KwgZRF5SUYQ1XU+9xeq4cGqC4D6i2sIIQaQ4h8a39/6WLIfUjpB5flmHkl ePl4ZBwHArXoVTkpumGuS5eG4mo2OzAqU+SA1ok9+d74DKU75AF5QpmNt+IkAc6Y OAxdrYg5O9Ngqj7PtGvH2J64YAa9RRVuX+mKuYPcOZP3gUoPRSpokiUFM6kVQI1p w8hxs+cOPPtsrOe5DjRx4/kf7iDvcHMdmeKAL8FUJzzkOKMC2G+eYDV43DnmFlP+ LuXjnB18G33VZ4bDLFBSj/RhWA== -----END CERTIFICATE-----Generated at Fri Sep 25 16:11:18 2026 by rpki-client